Who owns 20.190.151.9?

20.190.151.9 is announced by AS8075 (Microsoft Corporation), located in United States. The holder of the announced BGP prefix 20.184.0.0/13 is MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation. You can look up other IPs on the same network via the IPLogs ASN directory.

Should I block 20.190.151.9?

Apply elevated risk scoring rather than a hard block. Many false positives in this bucket are CGNAT-shared mobile users — a hard block would punish legitimate residential users.

Is 20.190.151.9 safe?

Cautious. This IP isn't on any threat-intel feed today, but it isn't a regular consumer connection either. Don't grant it residential-tier trust.

Why is my IP flagged as vpn likely?

If you visited iplogs.com from your own connection and were flagged vpn likely, the cause is one of: a VPN client on your device or network, a corporate proxy, a CGNAT pool that overlaps with VPN exits, an ISP-level DNS resolver routing through Cloudflare/Apple infrastructure, or your IP being on a published commercial-VPN relay list. The "Why this IP is flagged" section above lists every source that matched — that's the dispute trail.

How do I check 20.190.151.9 via API?

Hit our public API: `POST https://iplogs.com/v1/check` with body `{"ip":"20.190.151.9"}`. You get back a JSON verdict, score 0–1, every matched signal, ASN/geo info, and the full provenance list. Free, no signup, no API key. See /docs for client examples in curl, Python, Node.js and Go.

Is 20.190.151.9 a VPN? Probably.

Q: Is 20.190.151.9 a VPN?

Probably. 20.190.151.9 matches several VPN/proxy signals, but no single source has fully confirmed it. Treat as elevated risk.

IPv4 lookup

20.190.151.9

United StatesAshburnAS8075Microsoft Corporation

VPN likely

Multiple signals point to VPN/proxy — 4 signals matched across 3 intelligence sources. high confidence in this reading.

Threat Score

Network identity

ASN

AS8075

Organization

Microsoft Corporation

Network type

datacenter

Location

United States

Ashburn

Coordinates

39.044, -77.487

Country code

BGP / prefix

Announced prefix

20.184.0.0/13

Holder

MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation

This IP in /13512.0K addrs

Report abuse

Abuse contact

abuse@microsoft.com

Send abuse report

Detection signals · 7-layer pipeline

0.61

Weighted score · vpn-likely line 0.50

Summary

3 of 7 layers contributed evidence

4 signals matched · 0 strong sources · verdict score 0.71

ASN classification+0.30

Protocol handshake+0.21

IP intelligence+0.10

§ 01

+0.30moderate

ASN classification

Team Cymru allocation data + PeeringDB self-declared network type.

PeeringDB: content/cloudmoderate+0.20

PeeringDB classifies ASN AS8075 as "Content" — content/cloud-hosting profile

Datacenter facilitiesinfo+0.10

ASN AS8075 present in 167 public datacenter facilities

+0.30

moderate

§ 02

+0.21moderate

Protocol handshake

Live OpenVPN, IKEv2, WireGuard, SOCKS5, and HTTP-CONNECT probes. Ground truth on positive.

Active probe trojan or v2raymoderate+0.21

Empty 400 response on 443 (Trojan/V2Ray fallback signature) (on CDN ASN Microsoft (edge + Azure, mixed))

+0.21

moderate

§ 03

+0.10info

IP intelligence

Matches against the Tor exit list, public proxy feeds, curated VPN-provider ranges, and datacenter ASN registries.

Datacenter IPinfo+0.10

Datacenter / hosting ASN AS8075 (Microsoft Corporation)

+0.10

info

Σ Total weighted score

0.61 / 1.00

Should I block this IP?

Practical guidance by use case — fraud, ad-ops, streaming, and general websites.

Probable VPN/proxy — present a soft challenge

Several signals point to commercial VPN or proxy use, but no single source has fully confirmed it. False-positive risk is low but non-zero.

Fraud / risk teams: Add to your "elevated risk" bucket. Step-up auth on sensitive flows, but don't hard-block read traffic.
Ad ops / programmatic: Fold into your bot-likely bucket and discount bid value. Keep monitoring — when this hits vpn_detected, escalate to block.
Streaming / geo-licensing: Challenge with a soft block (geo-restriction notice with a path to retry). Many false positives here are CGNAT or carrier-grade NAT — don't punish residential users.

About IP address 20.190.151.9

20.190.151.9 is an IPv4 address routed via AS8075 (Microsoft Corporation) and geo-located to United States. The verdict above combines six free, no-auth intelligence sources: local db-ip ASN data, the Tor Project exit list, public proxy feeds (TheSpeedX / Proxifly / FireHOL), Team Cymru + PeeringDB for ASN classification, RIPE NCC for BGP topology and abuse contacts, and Shodan InternetDB for ~30-day port observation.

Verdicts are recomputed on every page load and cached for up to one hour upstream. No data about your browser or identity is persisted.